4 Authentication and Basic Security Controls Free Online FlashCards

What does authentication check?

Authentication checks whether a person or device is allowed to access an account or system.

Which authentication factor is a password or PIN?

A password or PIN is something you know.

What makes authentication multifactor?

Multifactor authentication uses two or more different types of factors, such as a password and an authenticator-app code.

Which MFA options resist phishing better?

Codes entered on a website can still be phished. Prefer phishing-resistant options such as passkeys or security keys when available.

Why should each account have a unique password?

Use a different password for every account; reuse lets attackers try a stolen password on other services.

What should you do if you suspect a password was exposed?

Change it on that service and anywhere it was reused. Review recovery options and sign out of unfamiliar sessions.

Why install software and device updates promptly?

Updates often fix security weaknesses attackers could exploit. Install them promptly and restart when required so they take effect.

What does a firewall do, and what can it not replace?

A firewall filters network traffic according to security rules and can reduce unwanted connections. Keep it enabled; it does not replace updates or careful handling of links and files.

What makes a backup strategy more resilient to ransomware?

Back up important files regularly to a separate location, keep at least one copy disconnected or otherwise protected, and test that files can be restored.

Which authentication factor is a phone or security key?

A phone, authenticator app, or physical security key is something you have.

Which authentication factor is a fingerprint?

A fingerprint or face scan is something you are.

Do two passwords count as two-factor authentication?

No. Both passwords are something you know; MFA requires different factor types.